Solved

Creating domain trusts to access remote shares

Posted on 2012-04-10
6
395 Views
Last Modified: 2012-04-11
Hi Guys,

I've got 2 domains in 2 seperate companies on 2003 and 2008 and have been tasked with creating a trust between them so that the local admins can change permissions on the shares on these domains to allow users from the other domains to access them without having to input their credentials each time. There will be a static VPN between the 2 networks.
I have never set these up before so any basic guides or things to look out for when doing this ? (i.e limitations, patching needed etc)

Thanks
0
Comment
Question by:NotExperts
6 Comments
 
LVL 26

Accepted Solution

by:
Leon Fester earned 500 total points
ID: 37826677
Firstly you'll need that VPN configured.
Next test that your DNS resolves correctly and your DNS servers are accessible from the remote network.

From that it's easy to setup the trust.
See previously answered question.
http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_23805633.html

Ports required on your firewall for the trust to work.
http://support.microsoft.com/kb/179442
http://technet.microsoft.com/en-us/library/cc759554(v=ws.10).aspx

All you need to know about trusts.
http://technet.microsoft.com/en-us/library/cc759554(v=ws.10).aspx
0
 
LVL 9

Expert Comment

by:araberuni
ID: 37826687
0
 

Author Comment

by:NotExperts
ID: 37826937
Thanks,

Do i need to setup a stub zone for each domain in the other domains ?
i.e i have 3 domains to setup trusts for so do i need a DNS stub zone for DomainA in DomainB and DomainC and a stub zone for DomainB in DomainA and DomainC etc ?

Ian
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 26

Expert Comment

by:Leon Fester
ID: 37826944
You can add stub zones, I prefer using conditional forwarders;
http://support.microsoft.com/kb/323380

Even a hosts file entry would work.
0
 
LVL 3

Expert Comment

by:chris-burns
ID: 37831513
I was in the same boat with three domains.

As long as your VPN is setup OK with free, unhindered traffic across the tunnel AND your DNS is set up to resolve correctly you will be good to go. ( Again, i think i would use conditional forwarders rather than stub-zones.)

It is surprisingly easy, our difficulty was to have two exchange servers share the same domain name.
0
 

Author Closing Comment

by:NotExperts
ID: 37836128
That's worked fine. Many Thanks
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question